REMARKS 

In the Office Action, the Examiner rejected Claims 1, 2, 4-7, 9-13 and 15-20, which were 
all of the then pending claims, under 35 U.S.C. 103 as being unpatentable over a document titled 
"P-Synch Installation and Administration Guide," (P-Synch) Document Revision 4,50, and dated 
June 1, 2000, in view of a printed web page titled "Using Privacy Features" (Mozilla). Also, the 
Examiner objected to Claims 10 and 16 as being substantial duplicated of claims 7 and 13 
respectively. 

Independent Claims 1, 7 and 13 are being amended to better define the subject matters of 
these claims. Claims 10 and 16 are being cancelled. As now amended the application includes 
Claims 1, 2, 4-7, 9, 11-13, 15 and 17-20. 

In view of the cancellation of Claims 10 and 16, it is believed unnecessary to discuss 
these claims further herein. 

For the reasons discussed below, Claims 1, 2 4-7, 9, 11-13, 15 and 17-20 patentably 
distinguish over the prior art and are allowable because the prior art does not disclose or render 
obvious the feature of a user using comprehensive password change tool in combination with a 
single password management facility, as described in independent Claims 1, 7 and 13, to change 
a plurality of passwords for a plurality of remote applications. 

As discussed in Applicants previous Amendment, the present invention provides an 
application that allows a person to define in a secure way a multitude of passwords as well as 
what actions they need to take to initiate a password change. In accordance with one 
embodiment of the invention, a software tool is provided for maintaining passwords. This tool 
comprises storage for a plurality of current passwords for a plurality of respective applications, 
and means for display ing a reminder to change one or more of those passwords. 
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A script is used for simulating keystroke entries to automatically perform a password 
change in said respective applications for said current passwords of said reminder. In addition, 
the tool storage also holds considerable information about the applications. For example, this 
storage, as mentioned above, holds, for each of the group of applications, a description of the 
application, a description of the password type, the current and the previous passwords for the 
application, and a uniform resource locator for the application. The tool also holds executable 
code and parameters needed to change the password for the application, and readable instructions 
for changing the password. 

When the tool is invoked, it displays a list of the passwords, a description of the computer 
applications for which those passwords are used, a description of a procedure for changing the 
password, and a graphical user interface. This graphical user interface is then used to invoke the 
scripts that, in turn, are used to change the passwords. 

The "P-Synch" document describes a password management application, referred to as 
"P-Synch." With this application, a user specifies the password to change to, or to reset, and P- 
Synch runs through its list of targets in the background. An administrator defines which 
machines and applications a user can modify passwords on, as well as more advanced options 
such as password aging. 

As described in the article, "P-Synch" uses either a native API or TELNET to log in to 
each machine or application one at a time, and runs whatever commands are necessary to modify 
the passwords. The user only needs to specify the password to change to (or to reset) and P- 
Synch, as mentioned above, runs through its list of targets in the background. 
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With the present invention, the password change tool has much more information, and 
also operates in a different way. In the implementation of the present invention, the user begins 
the process by invoking a tool or a password management facility. That tool or facility then 
displays a list of the passwords, a description of the computer applications for which those 
passwords are used, a description of a procedure for changing the password, and a graphical user 
interface that is then invoked to change the password. Also, this tool stores a considerable 
amount of information including, for each application the tool is used with, a description of the 
application, a description of the password type for the application, current and previous 
passwords for the application, a Uniform Resource Locator for the application, executable code 
and parameters needed to change the password for the application, and readable instructions for 
changing the password. 

This process is of significant utility because it provides a very simple and complete 
process to manage changing multiple passwords, and that can be used to ensure multiple levels 
of security. 

There are a number of important differences between the present invention and the 
manager and method disclosed in the cited P-synch document. One important difference 
between the instant invention and the "P-Synch" procedure is that the present invention is used 
by individual who want to change their own passwords on multiple remote applications, while 
the P-Synch procedure is used by system administrators to change passwords on multiple 
machines that are all part of one computer system. Another significant difference is that with the 
present invention, both current and past passwords are stored in the tool. 
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These features of the instant invention are also not shown in the Mozilla document. This 
reference discloses a password manager tool with storage for a user's current passwords. With 
the present invention, however, the tool stores both current and previous passwords. 

The other references of record have been reviewed, and these other references, whether 
considered individually or in combination, also do not disclose or render obvious the above- 
discussed aspect of the present invention. 

Independent Claims 1, 7 and 13 are being amended to better emphasize the above- 
discussed aspects of the present invention. More specifically, each of these claims is being 
amended to describe expressly the feature that a user uses a graphical user interface to invoke at 
a password management facility, all the scripts needed to change all of the plurality of passwords 
for all of a plurality of remote applications via the password management facility. 

In view of the above-discussed differences between Claims 1, 7 and 13 and the prior art, 
and because of the advantages associated with those differences, Claims 1, 7 and 13 patentably 
distinguish over the prior art and are allowable. Claims 2, 4-6 and 19 are dependent from, and 
are allowable with, Claim 1. Likewise, Claims 9, 1 1, 12 and 20 are dependent from Claim 7 and 
are allowable therewith; and Claims 15-18 are dependent from, and are allowable with, Claim 
13. 

For the reasons discussed above, the Examiner is respectfully asked to reconsider and to 
withdraw the rejection of Claims 1, 2 4-7, 9, 11-13, 15 and 17-20 under 35 U.S.C. 103, and to 
allow these claims. 
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If the Examiner believes that a telephone conference with Applicants' Attorneys would 



be advantageous to the disposition of this application, the Examiner is requested to telephone the 
undersigned. 



SCULLY, SCOTT, MURPHY & PRESSER, P.C. 
400 Garden City Plaza, Suite 300 
Garden City, New York 1 1530 
516-742-4343 

JSS/jy 



Respectfully submitted, 




\John S. Sensny 
Registration No. 28,757 
Attorney for Applicants 
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